This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File:                     3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier:          dBRaeSDWdLPzchdEGp+zayPqHu97NHn0ZQYImrBKz5Y=
Subject key identifier:   54:30:18:6C:AC:49:C6:CB:A2:A3:E7:C0:78:D1:2A:35:D1:DD:01:82
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer:       /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial:       019C4246AF5B4D6982830CB756E30C758B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number:          113F
Signing time:             Mon 09 Feb 2026 12:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:54 +0000
Files and hashes:         1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: LLwVINA3DCPzMpBBDKQ7W3CA8HpmJsJ6lt8AE1e6AIY=)
                          2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:af:5b:4d:69:82:83:0c:b7:56:e3:0c:75:8b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
        Validity
            Not Before: Feb  9 12:00:54 2026 GMT
            Not After : Feb 10 12:00:54 2026 GMT
        Subject: CN=5430186cac49c6cba2a3e7c078d12a35d1dd0182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:9e:af:67:d2:c8:16:ff:5b:21:27:06:1d:
                    a1:e3:4f:ea:81:86:d3:76:5b:9c:54:38:95:18:48:
                    8e:ee:84:90:c6:7d:99:50:c9:f7:97:92:17:1f:aa:
                    00:4e:f9:69:fe:0a:ad:93:fa:4f:77:7a:27:bc:4a:
                    7a:37:05:c4:90:f6:25:34:d9:ea:6d:71:a2:ef:7f:
                    eb:39:9b:f4:7e:7f:ea:81:5f:a6:3d:76:31:b5:a6:
                    9c:18:26:83:a8:bb:91:bb:32:19:d8:18:b7:33:b8:
                    24:bb:84:0a:b1:7a:f2:e9:cd:5e:f2:96:5f:ed:d5:
                    cd:a9:20:02:fe:3c:02:56:01:0d:b4:8d:f6:8a:98:
                    39:dd:09:21:a7:60:60:fb:35:d6:48:89:be:06:92:
                    54:b7:5a:33:6b:32:5b:ea:2b:04:c4:cb:eb:2f:98:
                    b4:9f:93:02:53:ec:fd:7f:cf:e4:64:57:10:96:a5:
                    5d:3d:fd:ac:e7:e8:25:72:9a:e8:ce:10:9f:83:d0:
                    eb:32:f4:a5:5d:4c:a1:34:df:3a:65:d8:e9:75:e4:
                    6c:7f:b4:6d:0f:d3:29:e9:73:fd:2d:29:3b:17:6a:
                    a8:9a:fa:28:1b:43:6c:96:3c:39:9e:d3:c5:7b:a0:
                    96:46:eb:07:74:09:5b:b2:0f:a1:c3:9e:02:26:75:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:30:18:6C:AC:49:C6:CB:A2:A3:E7:C0:78:D1:2A:35:D1:DD:01:82
            X509v3 Authority Key Identifier:
                keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c7:1d:5f:04:ed:fc:67:96:e8:e9:d6:9e:7b:39:2f:4d:ed:
         f2:28:c4:a3:1b:ad:a5:bd:05:0f:1c:53:9c:39:e0:1b:ab:bf:
         62:c9:0a:73:3c:f5:71:99:c9:55:e7:60:a1:84:3b:e4:5b:dd:
         f3:f5:b1:ba:53:51:e4:3c:3e:63:c3:e4:01:b7:61:cc:1b:c5:
         05:10:2b:9d:95:b4:ba:f9:6b:79:aa:b9:42:15:0b:43:6e:78:
         32:03:04:d8:ae:d1:f8:22:50:16:a5:b2:53:66:2d:83:90:07:
         bb:6b:d6:e3:8a:fe:9c:94:d1:a7:31:ff:e0:2f:07:bf:65:cf:
         d5:27:7e:b2:8d:ae:3b:38:ad:e8:0c:ba:0c:f6:38:c0:aa:49:
         08:7b:97:9b:b9:3b:5a:7b:ee:df:98:70:16:08:78:c6:5c:b4:
         84:67:8b:70:f6:6d:1d:a8:df:7f:27:d2:1f:89:cc:b8:81:38:
         07:32:24:e9:c7:77:29:90:67:ec:6e:11:54:8e:2d:e3:a8:61:
         0d:98:71:96:43:2d:ff:0d:06:e7:55:33:1b:8b:b9:86:2b:a1:
         94:1a:d1:72:4d:9a:8c:22:bd:fd:37:b0:a0:3b:40:83:8c:76:
         e8:30:a2:0b:52:f8:7b:ac:ed:ac:4f:5d:1c:09:a2:f4:34:a0:
         35:88:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:51 2026 by rpki-client